Heap-Based Buffer Overflow in NTPsec ntpd from Vendor NTPsec

CVE-2026-102484

What is CVE-2026-102484?

A heap-based buffer overflow exists in the JJY reference clock driver of NTPsec ntpd prior to version 1.2.6. This vulnerability could be exploited by an attacker who has control over the Telephone JJY time source. By sending more than six time replies, the attacker can induce memory corruption or cause the ntpd process to crash, potentially disrupting network time synchronization services. Proper implementation and software updates are critical to mitigate these risks.

References